Which of the following statements with respect to EU's General Data Protection Regulation (GDPR) is incorrect?

• A. The legislation related to GDPR was passed by the European Union in April 2016.
• B. Misusing or carelessly handling personal information will bring fines of up to 20 million euro.
• C. All EU citizens now have the right to see what information companies have about them.
• D. It is not mandatory for the companies to tell all affected users about any data breach.